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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1-105. (Cancelled) 

106. (Currently Amended) A digital rights management (DRM) system operating on a 
computing device when a user requests that a protected piece of digital content be rendered 
by the computer device in a particular manner, the system comprising: 

a rendering application by which the requested digital content is rendered; 

a license store for storing one or more digital licenses on the computing device , the 
license store providing access to the one or more digital licenses separately from the 
requested digital content ; 

a license evaluator for determining whether any licenses stored in the license store 
correspond to the requested digital content, for determining whether any such corresponding 
licenses are valid, for reviewing license rules in each such valid license, and for determining 
based on such reviewed license rules whether such license enables the requesting user to 
render the requested digital content in the manner sought; 

a state store for maintaining state information corresponding to each license in the 
license store, the state information being created and updated by the license evaluator as 
necessary; and 

a black box for performing encryption and decryption functions as part of the 
evaluation of any license, 

wherein the license evaluator selects an enabling, valid license and works with the 
black box to obtain a decryption key (KD) from the selected license, and wherein the black 
box employs such decryption key (KD) to decrypt the protected digital content, and 

wherein the black box decrypts the protected digital content when the license 
evaluator determines that a license in fact enables the requesting user to render the requested 
digital content in the manner sought. 

107. (Original) The DRM system of claim 106 wherein the license evaluator is a 
trusted component thereof. 
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108. (Original) The DRM system of claim 107 wherein the license evaluator runs in a 
protected environment on the computing device such that the user is denied access to such 
license evaluator. 

109. (Original) The DRM system of claim 106 wherein the license evaluator 
effectuates acquiring an enabling, valid license if no such enabling, valid license is located 
and if such enabling, valid license is available. 

110. (Original) The DRM system of claim 109 wherein the license evaluator refers to 
license acquisition information attached to the digital content during effectuating acquiring an 
enabling, valid license, the license acquisition information including data selected from a 
group consisting of types of licenses available and a network site at which a license server 
may be accessed. 

111. (Original) The DRM system of claim 110 wherein the license evaluator 
exchanges information with the license server during acquisition of an enabling, valid license. 

112. (Original) The DRM system of claim 110 further comprising a black box for 
performing encryption and decryption functions as part of the evaluation of any license, the 
black box having a first unique public / private key pair (PU-BB1, PR-BB1) that is employed 
as part of the evaluation of any license, wherein the license server refuses to issue a license to 
the license evaluator if the black box is not current. 

113. (Original) The DRM system of claim 112 wherein the license evaluator requests a 
current black box from a black box server, receives the requested black box, and installs the 
received black box on the computing device, the received black box having a second unique 
public / private key pair (PU-BB2, PR-BB2) different from the first unique public / private 
key pair (PU-BB1, PR-BB1). 
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114. (Original) The DRM system of claim 110 wherein the license evaluator receives 
an enabling, valid license from the license server and stores the received license in the license 
store. 

115. (Original) The DRM system of claim 106 wherein in determining whether the 
license enables the requesting user to render the requested digital content in the manner 
sought, the license evaluator has access to data on the computing device, such data being 
selected from a group consisting of: 

an identification of the computing device and/or particular aspects thereof; 
an identification of the user and/or particular aspects thereof; 

an identification of an application to be employed to render the digital content and/or 
particular aspects thereof; 

a system clock; and 
combinations thereof. 

116. (Canceled) 

117. (Previously Presented) The DRM system of claim 106 wherein the black box is 
a trusted component thereof 

118. (Original) The DRM system of claim 117 wherein the black box runs in a 
protected environment on the computing device such that the user is denied access to such 
black box. 

119. (Previously Presented) The DRM system of claim 1 06 wherein the black box 
works in conjunction with the license evaluator to decrypt / encrypt information as part of the 
evaluation of any license. 

120. (Canceled) 

121. (Canceled) 

Page 4 of 16 



DOCKET NO.: MSFT-0108 / 127334.8 
Application No.: 09/482,932 
Office Action Dated: 01/1 1/2005 



PATENT 



122. (Previously Presented) The DRM system of claim 106 wherein the black box 
works in conjunction with the license evaluator to decrypt / encrypt information as part of the 
evaluation of any license, and wherein the black box has a unique public / private key pair 
(PU-BB, PR-BB) that is employed as part of the evaluation of any license, and that is also 
employed to obtain a decryption key (KD) for decrypting the protected digital content. 

123. (Original) The DRM system of claim 106 wherein the license store is at least a 
portion of a memory storage device on the computing device. 

124. (Original) The DRM system of claim 123 wherein the license store is a directory 
of a memory drive. 

125. (Original) The DRM system of claim 124 wherein the memory drive is selected 
from a group consisting of a soft disk drive, a hard disk drive, and a network drive. 

126. (Original) The DRM system of claim 106 wherein the state store is a trusted 
component thereof. 

127. (Original) The DRM system of claim 126 wherein the state store runs in a 
protected environment on the computing device such that the user is denied access to such 
state store. 

128. (Original) The DRM system of claim 106 wherein each license in the license 
store may be removed therefrom, and wherein the state store also maintains state information 
corresponding to each license formerly in the license store. 

129. (Currently Amended) A computing device having a digital rights management 
(DRM) system operating thereon when a user requests that a protected piece of digital 
content be rendered by the computer device in a particular manner, the DRM system 
comprising: 
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a rendering application by which the requested digital content is rendered; 

a license store for storing one or more digital licenses on the computing device , the 
license store providing access to the one or more digital licenses separately from the 
requested digital content ; 

a license evaluator for determining whether any licenses stored in the license store 
correspond to the requested digital content, for determining whether any such corresponding 
licenses are valid, for reviewing license rules in each such valid license, and for determining 
based on such reviewed license rules whether such license enables the requesting user to 
render the requested digital content in the manner sought; 

a state store for maintaining state information corresponding to each license in the 
license store, the state information being created and updated by the license evaluator as 
necessary; and 

a black box for performing encryption and decryption functions as part of the 
evaluation of any license, 

wherein the license evaluator selects an enabling, valid license and works with the 
black box to obtain a decryption key (KD) from the selected license, and wherein the black 
box employs such decryption key (KD) to decrypt the protected digital content, and 

wherein the black box decrypts the protected digital content when the license 
evaluator determines that a license in fact enables the requesting user to render the requested 
digital content in the manner sought. 

130. (Original) The computing device of claim 129 wherein the license evaluator is a 
trusted component of the DRM system. 

131. (Original) The computing device of claim 130 wherein the license evaluator runs 
in a protected environment thereon such that the user is denied access to such license 
evaluator. 

132. (Original) The computing device of claim 129 wherein the license evaluator 
effectuates acquiring an enabling, valid license if no such enabling, valid license is located 
and if such enabling, valid license is available. 
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133. (Original) The computing device of claim 132 wherein the license evaluator 
refers to license acquisition information attached to the digital content during effectuating 
acquiring an enabling, valid license, the license acquisition information including data 
selected from a group consisting of types of licenses available and a network site at which a 
license server may be accessed. 

134. (Original) The computing device of claim 133 wherein the license evaluator 
exchanges information with the license server during acquisition of an enabling, valid license. 

135. (Original) The computing device of claim 133 wherein the DRM system further 
comprises a black box for performing encryption and decryption functions as part of the 
evaluation of any license, the black box having a first unique public / private key pair (PU- 
BB1, PR-BB1) that is employed as part of the evaluation of any license, wherein the license 
server refuses to issue a license to the license evaluator if the black box is not current. 

136. (Original) The computing device of claim 135 wherein the license evaluator 
requests a current black box from a black box server, receives the requested black box, and 
installs the received black box on the computing device, the received black box having a 
second unique public / private key pair (PU-BB2, PR-BB2) different from the first unique 
public / private key pair (PU-BB1, PR-BB1). 

137. (Original) The computing device of claim 133 wherein the license evaluator 
receives an enabling, valid license from the license server and stores the received license in 
the license store. 

138. (Original) The computing device of claim 129 wherein in determining whether 
the license enables the requesting user to render the requested digital content in the manner 
sought, the license evaluator has access to data on the computing device, such data being 
selected from a group consisting of: 

an identification of the computing device and/or particular aspects thereof; 
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an identification of the user and/or particular aspects thereof; 

an identification of an application to be employed to render the digital content and/or 
particular aspects thereof; 

a system clock; and 
combinations thereof. 

139. (Canceled) 

140. (Previously Presented) The computing device of claim 129 wherein the black 
box is a trusted component of the DRM system. 

141 . (Original) The computing device of claim 140 wherein the black box runs in a 
protected environment thereon such that the user is denied access to such black box. 

142. (Previously Presented) The computing device of claim 129 wherein the black 
box works in conjunction with the license evaluator to decrypt / encrypt information as part 
of the evaluation of any license. 

143. (Canceled) 

144. (Canceled) 

145. (Previously Presented) The computing device of claim 129 wherein the black 
box works in conjunction with the license evaluator to decrypt / encrypt information as part 
of the evaluation of any license, and wherein the black box has a unique public / private key 
pair (PU-BB, PR-BB) that is employed as part of the evaluation of any license, and that is 
also employed to obtain a decryption key (KD) for decrypting the protected digital content. 

146. (Original) The computing device of claim 129 wherein the license store is at least 
a portion of a memory storage device on the computing device. 
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147. (Original) The computing device of claim 146 wherein the license store is a 
directory of a memory drive. 

148. (Original) The computing device of claim 147 wherein the memory drive is 
selected from a group consisting of a soft disk drive, a hard disk drive, and a network drive. 

149. (Original) The computing device of claim 129 wherein the state store is a trusted 
component of the DRM system. 

150. (Original) The computing device of claim 149 wherein the state store runs in a 
protected environment thereon such that the user is denied access to such state store. 

151. (Original) The computing device of claim 129 wherein each license in the license 
store may be removed therefrom, and wherein the state store also maintains state information 
corresponding to each license formerly in the license store. 

152. (Currently Amended) A computer-readable medium having computer-executable 
instructions stored thereon for operating a digital rights management (DRM) system on a 
computing device when a user requests that a protected piece of digital content be rendered 
by the computer device in a particular manner, the instructions performing a method 
comprising: 

storing one or more digital licenses in a license store on the computing device JL the 
license store providing access to the one or more digital licenses separately from the 
requested digital content ; 

determining whether any licenses stored in the license store correspond to the 
requested digital content; 

determining whether any such corresponding licenses are valid; 

reviewing license rules in each such valid license; 

determining based on such reviewed license rules whether such license enables the 
requesting user to render the requested digital content in the manner sought; 
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maintaining in a state store on the computing device state information corresponding 
to each license in the license store, the state information being created and updated as 
necessary; and 

performing encryption and decryption functions as part of the evaluation of any 

license, 

the method comprising selecting an enabling, valid license, obtaining a decryption 
key (KD) from the selected license, and employing such decryption key (KD) to decrypt the 
protected digital content, 

the method comprising decrypting the protected digital content upon determining that 
a license in fact enables the requesting user to render the requested digital content in the 
manner sought. 

153. (Original) The method of claim 1 52 further comprising acquiring an enabling, 
valid license if no such enabling, valid license is located and if such enabling, valid license is 
available. 

154. (Original) The method of claim 153 further comprising referring to license 
acquisition information attached to the digital content to effectuate acquiring an enabling, 
valid license, the license acquisition information including data selected from a group 
consisting of types of licenses available and a network site at which a license server may be 
accessed. 

155. (Original) The method of claim 154 further comprising exchanging information 
with the license server during acquisition of an enabling, valid license. 

1 56. (Original) The method of claim 1 54 further comprising performing encryption 
and decryption functions as part of the evaluation of any license with a black box having a 
first unique public / private key pair (PU-BB1, PR-BB1) that is employed as part of the 
evaluation of any license. 
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157. (Original) The method of claim 156 wherein the license server refuses to issue a 
license to the license evaluator if the black box is not current, and wherein the method 
comprises: 

requesting a current black box from a black box server; 
receiving the requested black box; and 

installing the received black box on the computing device, the received black box 
having a second unique public / private key pair (PU-BB2, PR-BB2) different from the first 
unique public / private key pair (PU-BB1, PR-BB1). 

158. (Original) The method of claim 152 wherein determining whether the license 
enables the requesting user to render the requested digital content in the manner sought 
comprises determining whether the license enables the requesting user to render the requested 
digital content in the manner sought based on data stored on the computing device, such data 
being selected from a group consisting of: 

an identification of the computing device and/or particular aspects thereof; 
an identification of the user and/or particular aspects thereof; 

an identification of an application to be employed to render the digital content and/or 
particular aspects thereof; 

a system clock; and 
combinations thereof. 

159-161. (Canceled) 

1 62. (Previously Presented) The method of claim 1 52 further comprising performing 
encryption and decryption functions as part of the evaluation of any license with a black box 
having a unique public / private key pair (PU-BB, PR-BB) that is employed as part of the 
evaluation of any license. 

163. (Original) The method of claim 152 wherein each license in the license store may 
be removed therefrom, the method further comprising maintaining state information in the 
state store corresponding to each license formerly in the license store. 
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